CVE-2006-2908

The domecode function in inc/functionspost.php in MyBulletinBoard MyBB 1.1.2, and possibly other versions, allows remote attackers to execute arbitrary PHP code via the username field, which is used in a pregreplace function call with a /e executable modifier...

CVE-2006-2949

Cross-site scripting XSS vulnerability in private.php in MyBB 1.1.2 allows remote attackers to inject arbitrary web script or HTML via the do parameter...

CVE-2006-2949

The CVE-2006-2949 entry concerns a cross-site scripting (XSS) vulnerability in MyBB 1.1.2, occurring in private.php via the do parameter. The issue allows remote attackers to inject arbitrary web script or HTML. The connected documents do not provide additional technical details such as affected ...